(imported comment written by bhobbs91)
Here is one that will list shares in which the Everyone account is listed as a trustee:
q: names of it whose (exists (account name of trustee of entries of dacls of security descriptors of it) whose (it = “Everyone”)) of network shares
This will list every share with Everyone assigned to it and their read, write, execute privileges respectively:
q: (name of it, (account name of trustee of it, read permissions of it, write permissions of it, execute permissions of it) of entries whose (account name of trustee of it = “Everyone”) of dacls of security descriptors of it) of network shares
There are a lot of potential privileges that can be listed with this.
read permission of : boolean
list permission of : boolean
write permission of : boolean
create file permission of : boolean
append permission of : boolean
create folder permission of : boolean
read extended attributes permission of : boolean
write extended attributes permission of : boolean
execute permission of : boolean
traverse permission of : boolean
delete child permission of : boolean
read attributes permission of : boolean
write attributes permission of : boolean
query value permission of : boolean
set value permission of : boolean
create subkey permission of : boolean
enumerate subkeys permission of : boolean
change notification permission of : boolean
create link permission of : boolean
delete permission of : boolean
read control permission of : boolean
write dac permission of : boolean
write owner permission of : boolean
synchronize permission of : boolean
maximum allowed permission of : boolean
generic all permission of : boolean
generic execute permission of : boolean
generic write permission of : boolean
generic read permission of : boolean
access mode of : integer